From f1baf3693e5d94e4a26ba43115cdc94e66c4df06 Mon Sep 17 00:00:00 2001 From: Daniel Lenski Date: Thu, 8 Apr 2021 14:32:32 -0700 Subject: [PATCH] Multi-protocol support documentation Mention F5 and Fortinet on the index page, explain the multi-protocol design philosophy a bit more, and add a page with a concise list of the supported protocols. Signed-off-by: Daniel Lenski --- www/Makefile.am | 2 +- www/index.xml | 32 +++++++++++++++++++++++--------- www/menu1.xml | 2 +- www/protocols.xml | 36 ++++++++++++++++++++++++++++++++++++ 4 files changed, 61 insertions(+), 11 deletions(-) create mode 100644 www/protocols.xml diff --git a/www/Makefile.am b/www/Makefile.am index b0c89044..971f26fe 100644 --- a/www/Makefile.am +++ b/www/Makefile.am @@ -6,7 +6,7 @@ CONV = "$(srcdir)/html.py" FTR_PAGES = csd.html charset.html token.html pkcs11.html tpm.html features.html gui.html nonroot.html hip.html tncc.html START_PAGES = building.html connecting.html manual.html vpnc-script.html INDEX_PAGES = changelog.html download.html index.html packages.html platforms.html licence.html -PROTO_PAGES = anyconnect.html fortinet.html f5.html globalprotect.html juniper.html pulse.html +PROTO_PAGES = protocols.html anyconnect.html fortinet.html f5.html globalprotect.html juniper.html pulse.html TOPLEVEL_PAGES = contribute.html mail.html ALL_PAGES = $(FTR_PAGES) $(START_PAGES) $(INDEX_PAGES) $(TOPLEVEL_PAGES) $(PROTO_PAGES) diff --git a/www/index.xml b/www/index.xml index 45929336..ae92d103 100644 --- a/www/index.xml +++ b/www/index.xml @@ -9,21 +9,19 @@

OpenConnect

-

OpenConnect is an SSL VPN client initially created to support Cisco's AnyConnect SSL VPN. -It has since been ported to support the Juniper SSL VPN (which is now known as Pulse Connect Secure), -and the Palo Alto Networks GlobalProtect SSL VPN.

+

OpenConnect is an SSL VPN client initially created to support Cisco's AnyConnect SSL VPN

+ +

It has since been ported to support several other proprietary VPN protocols: +the Juniper SSL VPN (which is now known as Pulse Connect Secure), +the Palo Alto Networks GlobalProtect SSL VPN, +the F5 Big-IP SSL VPN, +and the Fortinet Fortigate SSL VPN.

An openconnect VPN server (ocserv), which implements an improved version of the Cisco AnyConnect protocol, has also been written.

OpenConnect is released under the GNU Lesser Public License, version 2.1.

-

Like vpnc, -OpenConnect is not officially supported by, or associated in any way -with, Cisco Systems, Juniper Networks, Pulse Secure, or Palo Alto Networks. -It just happens to interoperate with their equipment. -

-

Motivation

Development of OpenConnect was started after a trial of the Cisco @@ -46,5 +44,21 @@ client under Linux found it to have many deficiencies:

Naturally, OpenConnect addresses all of the above issues, and more.

+

Multi-protocol support

+ +

Like vpnc, +OpenConnect is not officially supported by, or associated in any way +with Cisco Systems, nor with Juniper Networks, Pulse Secure, +Palo Alto Networks, F5, or Fortinet. +It just happens to interoperate with their equipment.

+ +

Wherever possible, OpenConnect presents a uniform API and command-line +interface to each of these VPNs. For example, +openconnect --force-dpd=10 +will attempt dead peer detection every 10 seconds on every VPN that +supports it, even though the actual mechanism used may be protocol-specific. +Protocol-specific features and deficiencies are described on the +individual protocol pages.

+ diff --git a/www/menu1.xml b/www/menu1.xml index 511e3ef5..f5849a67 100644 --- a/www/menu1.xml +++ b/www/menu1.xml @@ -5,7 +5,7 @@ - + diff --git a/www/protocols.xml b/www/protocols.xml new file mode 100644 index 00000000..e93aeb77 --- /dev/null +++ b/www/protocols.xml @@ -0,0 +1,36 @@ + + + + + + + + + + +

Protocols

+ +

OpenConnect was initially created to support Cisco's AnyConnect SSL VPN. This remains the default protocol used by the client, if not otherwise specified. +See the --protocol option for how to use a different protocol with the command-line client.

+ +

The following pages document protocol-specific features and deficiencies:

+ + + + + -- 2.49.0